![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OYNrB4N_xTD4Icc2jWzRF8Qdas8.roa
File: OYNrB4N_xTD4Icc2jWzRF8Qdas8.roa (raw, json)
Hash identifier: k7BQbqH6pSNjotDWGgcdbxHAkmfchoEFXuDTxjd+ffI=
Subject key identifier: 39:83:6B:07:83:7F:C5:30:F8:21:C7:36:8D:6C:D1:17:C4:1D:6A:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A30
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OYNrB4N_xTD4Icc2jWzRF8Qdas8.roa
Signing time: Fri 01 Sep 2023 10:07:36 +0000
ROA not before: Fri 01 Sep 2023 10:07:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.198.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10800 (0x2a30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=39836B07837FC530F821C7368D6CD117C41D6ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:fb:a9:bf:7b:8e:ba:b6:f9:d3:73:06:59:
f8:5d:97:2a:60:a9:5d:07:fd:6d:2f:a4:ad:82:5b:
8b:de:69:cd:84:cb:76:40:7e:a6:fa:d0:f4:10:2e:
1f:20:ac:36:fb:0d:40:46:02:47:78:8d:03:e6:3d:
63:b1:19:97:50:f6:0c:9d:cc:1b:31:99:a1:98:90:
0c:75:14:1b:d8:22:74:18:f7:ba:92:cf:c7:f3:80:
01:e7:08:65:79:03:dd:6e:f3:73:a9:8e:6f:37:02:
38:6b:0b:da:c5:6a:3a:00:05:be:40:7e:78:64:6f:
43:a2:4b:63:c4:c0:94:af:c0:93:a1:a9:d4:06:05:
88:31:4d:02:bb:ad:f1:22:0f:02:8e:5a:17:b0:1a:
83:82:d3:dc:9a:00:58:0c:44:53:8b:8d:74:19:e0:
8a:f3:01:15:4f:cc:1b:87:77:ba:46:ad:9b:4b:71:
1f:4d:9b:4c:7d:8c:99:ea:37:54:27:38:89:90:1c:
4e:82:cc:c9:75:50:0d:74:53:c2:1f:d7:11:13:52:
f1:76:c1:71:82:db:f6:57:28:43:6b:cd:2c:ca:42:
f7:14:a7:20:c5:99:5c:d8:17:6a:bc:84:39:7a:63:
e6:71:28:00:f7:74:ff:96:07:c7:c4:f3:b4:0e:f9:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:83:6B:07:83:7F:C5:30:F8:21:C7:36:8D:6C:D1:17:C4:1D:6A:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OYNrB4N_xTD4Icc2jWzRF8Qdas8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.198.0/23
Signature Algorithm: sha256WithRSAEncryption
53:19:4c:c1:26:3b:47:ce:23:15:7d:b3:f1:9b:f8:bb:f9:e7:
b4:2e:55:07:9f:77:25:c6:ad:b9:2c:ce:83:32:22:e3:3f:66:
c6:bc:b8:bf:3d:7b:93:64:14:66:c4:32:c1:73:2a:5d:56:6e:
9b:0e:1a:f5:f8:c5:e4:8e:5d:29:c1:76:b4:a2:4b:37:ff:e2:
78:95:49:2e:fa:05:60:98:e0:48:fd:57:6e:86:56:55:59:0f:
97:93:18:1b:55:aa:86:cb:14:b2:bc:88:04:a6:10:ee:d7:4e:
c5:b4:a2:14:49:7c:b1:35:f4:39:6a:1e:8b:a9:9c:02:d2:5c:
8b:ba:f0:cc:c8:c1:48:89:2c:f1:1b:56:6b:69:04:0a:a9:36:
02:38:7f:94:84:88:8a:f9:d1:e0:b0:74:6f:f0:8f:c8:75:86:
e9:fd:60:11:df:69:35:41:1a:2e:43:21:15:35:b1:96:95:49:
57:a2:e9:27:41:3c:2c:1a:ac:bb:53:f4:a9:43:c0:be:49:0d:
30:3a:4c:e3:7b:19:41:b0:16:11:24:74:c4:97:40:06:d3:72:
57:3a:32:c1:93:84:85:c8:b6:ef:8b:4b:64:e2:2f:da:7d:61:
2d:90:6c:a5:2b:b9:4a:df:b7:04:da:37:87:82:8c:c9:ad:50:
5f:5a:a1:76
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM5ODM2QjA3ODM3RkM1
MzBGODIxQzczNjhENkNEMTE3QzQxRDZBQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzhPupv3uOurb503MGWfhdlypgqV0H/W0vpK2CW4veac2Ey3ZA
fqb60PQQLh8grDb7DUBGAkd4jQPmPWOxGZdQ9gydzBsxmaGYkAx1FBvYInQY97qS
z8fzgAHnCGV5A91u83Opjm83AjhrC9rFajoABb5Afnhkb0OiS2PEwJSvwJOhqdQG
BYgxTQK7rfEiDwKOWhewGoOC09yaAFgMRFOLjXQZ4IrzARVPzBuHd7pGrZtLcR9N
m0x9jJnqN1QnOImQHE6CzMl1UA10U8If1xETUvF2wXGC2/ZXKENrzSzKQvcUpyDF
mVzYF2q8hDl6Y+ZxKAD3dP+WB8fE87QO+WgnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOYNrB4N/xTD4Icc2jWzRF8Qdas8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09ZTnJCNE5feFRENEljYzJq
V3pSRjhRZGFzOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7
wcYwDQYJKoZIhvcNAQELBQADggEBAFMZTMEmO0fOIxV9s/Gb+Lv557QuVQefdyXG
rbkszoMyIuM/Zsa8uL89e5NkFGbEMsFzKl1WbpsOGvX4xeSOXSnBdrSiSzf/4niV
SS76BWCY4Ej9V26GVlVZD5eTGBtVqobLFLK8iASmEO7XTsW0ohRJfLE19DlqHoup
nALSXIu68MzIwUiJLPEbVmtpBAqpNgI4f5SEiIr50eCwdG/wj8h1hun9YBHfaTVB
Gi5DIRU1sZaVSVei6SdBPCwarLtT9KlDwL5JDTA6TON7GUGwFhEkdMSXQAbTclc6
MsGThIXItu+LS2TiL9p9YS2QbKUruUrftwTaN4eCjMmtUF9aoXY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:53 2025 by rpki-client